Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/WcbdHm1VVRQwHSdLcXD4GaUt7bw.roa
File:                     WcbdHm1VVRQwHSdLcXD4GaUt7bw.roa (raw, json)
Hash identifier:          KHj7H+bkL6579RRoXPMeNOQvZTsgYcVShxge6rewUjY=
Subject key identifier:   59:C6:DD:1E:6D:55:55:14:30:1D:27:4B:71:70:F8:19:A5:2D:ED:BC
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       CF
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/WcbdHm1VVRQwHSdLcXD4GaUt7bw.roa
Signing time:             Thu 01 May 2025 01:29:08 +0000
ROA not before:           Thu 01 May 2025 01:29:08 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     2518
IP address blocks:        218.42.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 May 2025 20:32:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 207 (0xcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: May  1 01:29:08 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=59C6DD1E6D555514301D274B7170F819A52DEDBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ed:0d:36:f6:b4:03:72:12:d0:a9:8d:56:fc:
                    e9:81:da:24:e3:ec:8d:03:24:fc:75:96:75:f4:18:
                    cb:9c:cb:fa:a1:af:53:47:6e:77:07:07:42:88:d8:
                    11:d2:33:38:42:bb:cf:ad:86:42:a3:34:8d:47:1d:
                    ab:49:7c:89:dd:0e:c1:76:62:3a:2f:d3:88:c3:3b:
                    e9:53:bc:75:84:6d:a9:8b:0e:07:22:23:a2:ee:49:
                    81:b1:89:a6:bd:aa:7e:ed:a8:3e:20:34:48:da:34:
                    71:ad:64:2c:af:fb:e5:a9:2f:bd:89:ec:30:68:4e:
                    a5:3c:4e:49:77:86:95:45:7d:6a:58:81:50:0a:56:
                    73:58:f1:47:4c:af:5a:8b:4e:6b:83:b4:3b:69:d1:
                    5c:e9:71:73:bc:67:3e:d4:6a:98:26:d2:02:c8:31:
                    65:12:03:2f:c1:c4:2f:3e:2c:e4:8c:c9:44:c2:4b:
                    e8:fd:cb:06:12:87:7c:99:8b:1e:c4:a1:f0:98:dc:
                    da:93:17:de:c5:89:ee:1a:29:95:c8:91:4f:b5:1d:
                    43:a3:71:d8:96:21:4d:f5:3c:73:d5:67:e4:7d:ff:
                    87:f8:64:cf:cf:bc:a1:85:4d:c0:e6:c4:a7:98:bb:
                    78:75:60:4f:c1:57:e2:6c:26:aa:3a:72:1e:36:5e:
                    9e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C6:DD:1E:6D:55:55:14:30:1D:27:4B:71:70:F8:19:A5:2D:ED:BC
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/WcbdHm1VVRQwHSdLcXD4GaUt7bw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.42.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         3d:e4:f4:7f:fb:55:61:2f:82:e9:d3:10:a1:92:b1:e5:09:a4:
         c9:1b:b0:b6:18:ef:7d:1c:67:54:70:df:87:0e:e9:fe:9a:d9:
         42:57:42:52:3a:eb:6a:14:aa:96:7a:2a:8c:0e:de:12:b4:82:
         10:06:ac:01:fb:d8:31:ad:47:f5:e4:02:d8:68:4d:ef:c2:9c:
         db:90:8b:8a:53:9f:cd:e3:db:2f:66:d5:2d:8b:f6:6c:51:de:
         41:89:1e:20:66:f6:94:4e:1e:a5:63:4c:79:49:88:43:c3:0c:
         5d:97:7d:f9:f4:72:19:3d:7e:a8:1e:83:35:3c:92:46:b8:6c:
         89:88:b5:3f:65:df:21:0a:71:a9:c1:47:20:54:af:6b:f6:ec:
         a4:94:4b:1c:b0:d0:49:32:40:5e:62:8b:7e:7f:22:13:b4:09:
         3e:73:e2:74:3b:0f:3a:19:bf:ed:f1:af:4f:ab:74:2d:2f:60:
         d5:4b:bb:93:e2:5c:94:4c:a1:37:d7:41:b0:71:12:ab:4c:80:
         90:c9:c3:9e:02:ec:1b:d5:2a:eb:03:bd:cd:ea:e2:28:65:7b:
         c8:aa:c8:01:7a:7a:05:c7:0b:4c:7e:15:15:81:ce:11:34:d5:
         cd:a7:42:92:e9:b6:87:d7:20:93:4b:c7:10:6f:b0:40:36:fb:
         09:a6:75:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 22:54:26 2025 by rpki-client